Video wird geladen...
Video konnte nicht geladen werden
Anyone can Access Deleted and Private Repository Data on GitHub :
25,975 Aufrufe • vor 1 Jahr •via X (Twitter)
11 Kommentare

I'm not an expert but isn't it just common sense not to push the private credentials to GitHub?

Automated GitHub, GitLab, Bitbucket and Jira backups, security compliance, data migration and every-scenario-ready Disaster Recovery for 360 cyber resilience. Schedule a custom demo or try 14 days for free.

i don't understand, ur saying a public fork is still accessible after the upstream is deleted? is this not normal? somehow doesn't seem like a gotcha on its own if that's all, so i must be missing something...

the commit history is still forever there...

how is this shocking to literally anyone. did you seriously need to make a flow chart for this? wtf is happening

great article 👌😎

Hmmm how this sensitive data was puted to the sources?

Haha

That's not good 💀

here comes the TruffleHog!

Can one use it to undelete stuff that was hit with a DMCA?
